SCCM, How do I provide off-campus support for my endpoints?

How should SCCM endpoints not on the campus network send & receive data from SCCM?

Have the endpoint run the campus VPN and the SCCM client should notice the change in networking and be able to connect to the University SCCM deployment. Due to security limitations, only managed content will be available over the wireless and VPN networks. Custom content will only be accessible over your unit's network boundaries, as defined during provisioning.